Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
File: Dh8fRS7maY6Z38tOP1rus7wlA4U.mft (raw, json)
Hash identifier: V9P01Cb0LX+R5oL20H7qWJNwgZOsWlUa1Lqw8YGNF/M=
Subject key identifier: 85:59:E9:AB:8F:24:8B:06:6C:B4:30:CE:57:93:9C:A9:EA:FA:89:AB
Authority key identifier: 0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
Certificate issuer: /CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Certificate serial: 01974BC45BE8983243B6988A3A579B23EC6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
Manifest number: 0F78
Signing time: Sat 07 Jun 2025 19:00:49 +0000
Manifest this update: Sat 07 Jun 2025 19:00:49 +0000
Manifest next update: Sun 08 Jun 2025 19:00:49 +0000
Files and hashes: 1: 69j8k9W_Kz202mE3W0ylnRGyMyQ.roa (hash: VQv9gDwWX0bKpqI6qovNd6HvrIeep8UuZ4eE64gS7zI=)
2: Dh8fRS7maY6Z38tOP1rus7wlA4U.crl (hash: fZ+wsHwZlBcaVh8K6jWVvEljo1hLXsMVvzT8LU4u/l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:5b:e8:98:32:43:b6:98:8a:3a:57:9b:23:ec:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Validity
Not Before: Jun 7 19:00:49 2025 GMT
Not After : Jun 8 19:00:49 2025 GMT
Subject: CN=8559e9ab8f248b066cb430ce57939ca9eafa89ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ae:9a:24:74:58:2a:7e:d2:de:e6:cf:58:0d:
a1:7b:b7:a6:27:e9:52:6b:67:48:b9:df:f2:53:b2:
9b:6f:84:b2:7a:ff:f2:1e:20:9e:7e:67:1c:55:d5:
ca:8c:ec:ec:d5:c8:80:82:45:99:4f:6e:8f:77:17:
e8:40:09:e8:0e:c2:8b:87:84:82:f8:a6:6a:7a:90:
a1:58:1f:ae:4e:07:f9:67:72:a0:4a:2b:7c:7f:85:
fd:d2:0a:1d:7a:14:46:f7:4c:1a:83:f6:a8:bc:df:
61:f1:e2:5e:5a:01:1d:59:5f:d7:27:1a:2f:65:85:
f5:ca:9b:0d:85:7d:39:18:c7:b9:a3:6f:d8:8c:29:
5c:74:79:8a:d3:f1:c8:f1:6e:cd:77:5c:ab:a7:2f:
86:93:70:1c:00:a9:da:31:8e:cd:2e:19:35:0b:33:
c2:e3:fe:41:db:d7:4e:a1:16:dc:86:85:19:1d:e6:
f3:a6:f4:69:cf:69:ca:16:c9:5f:e9:18:ec:c5:ab:
7e:48:cf:3f:4b:7b:b0:8b:ab:9a:6f:c8:4b:8b:38:
8a:bf:31:8a:6c:42:a9:75:9a:32:33:1e:b4:89:ab:
3b:dd:1a:be:19:fe:3a:52:d8:f8:8f:cd:06:d4:6f:
e1:9f:fe:cc:c5:00:6e:dc:d7:c5:ad:f3:3a:ce:89:
a4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:59:E9:AB:8F:24:8B:06:6C:B4:30:CE:57:93:9C:A9:EA:FA:89:AB
X509v3 Authority Key Identifier:
keyid:0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:18:f3:28:45:32:1d:a9:f6:0d:c3:94:eb:22:41:96:5b:39:
91:50:a0:89:54:ea:ce:e1:cb:d7:c1:2f:db:2e:76:ef:b4:73:
96:b8:45:54:57:7b:43:d7:33:50:58:c6:29:56:4c:ed:c6:9f:
7b:22:99:96:a7:5e:dd:3a:23:c9:58:2d:04:ec:26:29:08:5f:
e7:9a:99:83:07:8f:74:a0:e1:f0:94:3a:6a:ec:43:60:da:cc:
94:52:bc:cc:4b:da:88:f0:96:f5:38:3c:97:b7:8c:ca:ff:02:
c7:6f:81:de:83:a1:3c:40:ee:6c:2b:b5:bb:f6:51:5e:23:d3:
60:0f:00:18:01:78:2b:4f:67:13:ae:08:e4:2b:80:fd:c4:1f:
49:de:f9:54:78:92:eb:2d:a9:7d:3a:20:21:3e:36:03:fe:f4:
1f:1a:e9:ac:d4:00:f6:8e:b0:39:9d:8b:1b:4a:4f:f7:8a:42:
6f:5c:60:2d:5a:ab:b4:dc:60:2b:93:c9:5d:3b:a5:e6:69:ad:
36:ef:f0:da:76:9d:20:04:38:39:9a:00:27:f0:57:27:47:be:
9d:72:bb:bf:87:53:fd:60:42:ce:34:99:37:ee:44:df:21:f6:
e4:e9:57:31:ba:50:9b:cb:e3:3f:60:ef:40:2c:43:62:42:92:
99:0d:29:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:51:39 2025 by rpki-client